Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/CT6mrekwxJmn9zrBEcEe3LvuPNk.roa
File: CT6mrekwxJmn9zrBEcEe3LvuPNk.roa (raw, json)
Hash identifier: Q3gbhZ/HHASCFpbFXEsjS0CS7XF1+2mLgB80HVleVGY=
Subject key identifier: 09:3E:A6:AD:E9:30:C4:99:A7:F7:3A:C1:11:C1:1E:DC:BB:EE:3C:D9
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: F0EB91
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/CT6mrekwxJmn9zrBEcEe3LvuPNk.roa
Signing time: Sat 01 Jan 2022 11:58:43 +0000
ROA not before: Sat 01 Jan 2022 11:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206988
IP address blocks: 185.169.224.0/22 maxlen: 22
2a0a:6d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15788945 (0xf0eb91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Jan 1 11:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=093ea6ade930c499a7f73ac111c11edcbbee3cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:a7:ce:01:ab:7b:a6:10:ec:0c:db:cb:57:
c0:d8:81:8d:a9:dd:3c:66:13:e9:74:50:97:13:37:
a9:20:8a:d9:4a:cf:7a:73:a9:fa:6a:e2:88:22:ff:
00:80:4e:c7:58:b1:cd:e6:c1:70:9c:c6:4e:41:9a:
d1:d5:02:87:45:6d:6c:a3:29:a3:49:d8:67:4a:c3:
2b:a0:b8:02:24:0f:d6:82:6e:80:e0:43:5a:27:43:
e3:1c:81:f9:b4:e2:12:b0:d8:f0:bd:8c:e9:53:55:
e0:b3:51:74:cd:b5:d2:73:69:f7:53:6d:1c:c6:3d:
c4:d8:53:08:c6:9f:ae:5d:13:cf:0c:4e:3b:c6:1e:
8f:da:a8:59:47:54:84:b9:31:2f:f7:80:b4:e9:d8:
ac:e9:ad:fc:30:ae:e8:50:9f:61:8d:15:c4:76:e9:
95:26:e7:ba:f6:68:14:32:ba:e4:4e:ab:ed:d3:74:
0d:20:3f:6d:a3:f0:96:b9:76:39:e7:8d:4b:34:77:
b6:04:c5:c9:8a:a0:77:d4:b4:ae:c6:21:6c:d2:98:
90:5f:51:a3:02:3d:b1:16:96:1f:03:30:e4:76:11:
ef:e7:f6:35:ea:f1:10:58:0b:33:1b:5b:20:ba:fd:
26:cd:9d:ea:29:ce:73:65:38:aa:9c:d5:64:b7:42:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3E:A6:AD:E9:30:C4:99:A7:F7:3A:C1:11:C1:1E:DC:BB:EE:3C:D9
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/CT6mrekwxJmn9zrBEcEe3LvuPNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.224.0/22
IPv6:
2a0a:6d00::/29
Signature Algorithm: sha256WithRSAEncryption
18:c1:d5:e0:43:ce:5b:3e:14:a2:cb:84:90:8d:9b:0b:8b:d2:
7f:8b:07:20:5b:03:50:45:6b:74:5f:fa:50:45:dc:14:00:aa:
03:82:d0:d9:0c:40:1e:61:b3:79:08:99:b9:42:b4:90:1c:b2:
d6:85:40:65:f8:53:4a:8d:cd:93:3f:de:ad:fd:f8:d3:78:70:
c6:93:13:df:fb:86:e6:0e:54:aa:98:90:e2:8f:b4:70:5b:4c:
5f:70:f7:8e:c0:c6:74:ef:69:9a:d4:5a:18:d1:dc:3e:49:5c:
34:0b:e1:7d:a1:61:05:57:6b:e2:97:d5:04:d3:4c:5f:4b:9e:
53:a3:ca:2b:a4:62:49:e7:eb:fa:ed:09:8f:df:f4:f0:af:12:
2e:f7:33:fa:c9:b0:ba:2f:b4:ef:c0:ea:7f:38:7c:85:19:74:
79:20:0c:d0:db:72:86:10:15:be:43:ae:22:11:b8:c8:68:50:
db:7f:eb:d5:43:a3:24:54:47:e6:9f:39:c6:1c:2c:bd:2a:36:
c2:6c:a3:45:2b:61:ba:41:37:c2:24:5d:64:a9:7e:b4:3d:d0:
37:ec:77:60:56:77:8e:4f:f2:dd:78:90:5e:d3:6f:a3:78:2d:
c4:b4:64:fc:33:3d:1f:e2:d5:62:8e:98:c6:79:48:66:65:8f:
31:5c:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:53 2025 by rpki-client